2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8538 | MEDIUM | 4.3 | 0.6% | Sep 7, 2024 | The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in a... |
| CVE-2024-6849 | MEDIUM | 5.4 | 0.3% | Sep 7, 2024 | The Preloader Plus – WordPress Loading Screen Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2024-8521 | MEDIUM | 6.1 | 0.5% | Sep 7, 2024 | A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index o... |
| CVE-2024-34155 | MEDIUM | 4.3 | 0.8% | Sep 6, 2024 | Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stac... |
| CVE-2024-8394 | MEDIUM | 6.5 | 0.3% | Sep 6, 2024 | When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a p... |
| CVE-2024-38640 | MEDIUM | 5.4 | 0.2% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability... |
| CVE-2024-32762 | MEDIUM | 6.1 | 0.2% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability cou... |
| CVE-2024-27126 | MEDIUM | 5.4 | 0.2% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability ... |
| CVE-2024-27125 | MEDIUM | 4.8 | 0.2% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could a... |
| CVE-2024-27122 | MEDIUM | 5.4 | 0.2% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability ... |
| CVE-2024-21906 | MEDIUM | 4.7 | 0.8% | Sep 6, 2024 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, ... |
| CVE-2024-21904 | MEDIUM | 6.5 | 0.3% | Sep 6, 2024 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul... |
| CVE-2024-21903 | MEDIUM | 4.7 | 0.8% | Sep 6, 2024 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, ... |
| CVE-2024-21897 | MEDIUM | 5.4 | 0.3% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi... |
| CVE-2024-25584 | MEDIUM | 5.3 | 0.2% | Sep 6, 2024 | Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be CR LF DOT CR LF. This... |
| CVE-2024-7622 | MEDIUM | 4.3 | 0.4% | Sep 6, 2024 | The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing cap... |
| CVE-2024-7611 | MEDIUM | 5.4 | 0.3% | Sep 6, 2024 | The Enter Addons – Ultimate Template Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip... |
| CVE-2024-7599 | MEDIUM | 5.4 | 0.3% | Sep 6, 2024 | The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ para... |
| CVE-2024-44837 | MEDIUM | 5.4 | 0.3% | Sep 6, 2024 | A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute ... |
| CVE-2024-45405 | MEDIUM | 6 | 0.3% | Sep 6, 2024 | `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their con... |
| CVE-2024-45300 | MEDIUM | 5.9 | 0.4% | Sep 6, 2024 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to versio... |
| CVE-2024-45299 | MEDIUM | 6.5 | 0.7% | Sep 6, 2024 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to versio... |
| CVE-2024-45040 | MEDIUM | 5.9 | 0.4% | Sep 6, 2024 | gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments t... |
| CVE-2024-45039 | MEDIUM | 6.2 | 0.2% | Sep 6, 2024 | gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundn... |
| CVE-2024-8427 | MEDIUM | 4.3 | 0.3% | Sep 6, 2024 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unau... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now